Archive
30 May 2006
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1.1 allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-2668 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-2666 Public exploit
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote at…
-
Unscored —CVE-2006-2675 Public exploit
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute ar…
-
Unscored —
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname f…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary…
-
Unscored —
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-2665 Public exploit
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown…
-
Unscored —
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file th…
-
Unscored —
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject a…
-
Unscored —
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the conf…
-
Unscored —CVE-2006-2635 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers t…
-
Unscored —CVE-2006-2653 Public exploit
Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject a…
-
Unscored —CVE-2006-2646 Public exploit
Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a l…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d…
-
Unscored —
Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to inject arbitrary HTML a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3…
-
Unscored —
** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) v…
-
Unscored —CVE-2006-2645 Public exploit
PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to exec…
-
Unscored —
** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) v…
-
Unscored —CVE-2006-2648 Public exploit
Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to in…
-
Unscored —CVE-2006-2638 Public exploit
SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2006-2636 Public exploit
newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative acce…
-
Unscored —
Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remot…
-
Unscored —CVE-2006-2650 Public exploit
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users t…